无情的 Fork 机器's repositories
CVE-2024-26229-BOF
BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel
AMSI_VEH
A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, function hooking or Import Address Table (IAT) modification.
C_Sep_Loader
一个简单的远程分离的加载器,免杀国内大部分杀软(360 火绒 Windows Defender 金山毒霸 电脑管家)
d-eyes
D-Eyes为M-SEC社区一款检测与响应工具
Deobfuscar
A simple commandline application to automatically decrypt strings from Obfuscator protected binaries
everHold
Windows Persistence Toolsets（Windows 平台下权限维持集成工具）
gatherBurp
一款burp插件,请看简介
inspector
IDEA代码审计辅助插件（深信服深蓝实验室天威战队强力驱动）
Invoke-ADEnum
Automate Active Directory Enumeration
java-memshell-generator
一款支持高度自定义的 Java 内存马生成工具
java-sec-code
Java web common vulnerabilities and security code which is base on springboot and spring security
javaeasyscan
javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手
metasploit-payloads
Unified repository for different Metasploit Framework payloads
miscan
一款简单好用的漏洞管理工具，支持本地和协作两种模式。
MyShellcodeLoader
免杀与恶意软件开发
nemo_test
用于nemo的自动化测试模拟环境
no-defender
A slightly more fun way to disable windows defender + firewall. (through the WSC api)
No_X_Memory_ShellCode_Loader
无可执行权限加载 ShellCode (点点 Star，非常感谢!) Loading ShellCode without executable permission (Click Star, thank you very much!)
OneLong
简化前期信息收集的繁重任务，协助红队人员快速的信息收集，达到一条龙的效果
PayloadsAllThePDFs
PDF Files for Pentesting
RemoteKrbRelay
Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework
reverst
Reverse Tunnels in Go over HTTP/3 and QUIC
ScopeSentry
ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点
ScopeSentry-Scan
ScopeSentry工具扫描端源码
semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
sqlmc
Official Kali Linux tool to check all urls of a domain for SQL injections :)
SteppingStones
A Red Team Activity Hub
Voidgate
A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page.